Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/za-iyslgOsK_IlnWfleOFoVQpus.roa
File: za-iyslgOsK_IlnWfleOFoVQpus.roa (raw, json)
Hash identifier: +u6HwTRon46lb6nPLe40N+5F8fawj5sBdaEiNNj3dh0=
Subject key identifier: CD:AF:A2:CA:C9:60:3A:C2:BF:22:59:D6:7E:57:8E:16:85:50:A6:EB
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D61C4FD860EF15203505B3C21FF8AC7B3
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/za-iyslgOsK_IlnWfleOFoVQpus.roa
Signing time: Wed 31 Jan 2024 23:05:16 +0000
ROA not before: Wed 31 Jan 2024 23:05:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:61c4:461b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:61:c4:fd:86:0e:f1:52:03:50:5b:3c:21:ff:8a:c7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 31 23:05:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdafa2cac9603ac2bf2259d67e578e168550a6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9e:6a:a8:f4:03:0a:8f:f5:de:58:63:1e:ef:
1e:8f:f9:d1:5e:31:c7:76:d6:9a:bd:07:fc:a4:95:
fa:48:56:cd:74:6d:a6:59:08:83:e0:aa:f1:11:cc:
49:a8:d1:03:62:ed:c0:f5:52:ee:b6:ab:2e:f5:65:
6f:ce:43:6e:3d:14:21:70:2f:4c:09:d9:23:0f:cf:
e2:29:16:02:f8:25:2e:f9:88:09:ee:8f:e9:11:40:
3c:41:7e:77:7f:32:83:87:e3:0e:f8:ee:50:b7:4b:
02:ff:f9:b1:40:95:fc:e6:bc:11:10:1e:44:57:91:
86:39:6b:58:fc:a0:05:d4:01:19:a2:a7:c8:77:17:
50:84:ae:d8:74:6a:e9:9f:65:10:e1:c3:ed:f5:c9:
aa:ab:1d:95:b1:b5:f5:96:77:12:69:da:a1:a1:4f:
b4:35:cb:06:25:c3:19:35:5a:8c:f4:4b:34:7a:bf:
40:f8:77:75:b5:f8:f4:ba:b2:f8:d3:1c:78:1a:fc:
a1:35:cf:34:88:67:38:72:dd:d2:f4:d6:85:1e:c0:
63:af:54:aa:1b:7c:7f:a2:07:5c:eb:d5:6f:e3:d3:
9e:ea:74:35:65:65:51:0e:ca:a6:31:fb:1f:61:60:
86:85:0b:bb:22:4a:5e:24:9a:a7:20:c3:ee:4d:01:
f3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AF:A2:CA:C9:60:3A:C2:BF:22:59:D6:7E:57:8E:16:85:50:A6:EB
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/za-iyslgOsK_IlnWfleOFoVQpus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:3f:e7:52:68:18:de:67:bb:3a:3e:7e:95:cb:84:46:66:4b:
a1:a4:d5:26:66:56:d7:fa:53:91:77:8b:5a:2a:35:af:42:a9:
cf:3e:28:38:42:42:22:44:0f:3d:c5:78:67:a4:85:35:8c:47:
f2:8c:f7:97:36:f6:b5:49:86:f9:cb:23:d9:a5:e5:17:5f:5e:
1a:57:94:f4:78:37:f4:21:37:36:78:94:2f:b0:92:d0:56:87:
ec:73:3c:a6:08:82:cd:1d:04:bd:72:43:75:c2:93:ec:c3:81:
86:92:52:c4:b5:24:be:c9:24:63:c6:15:f8:0c:be:2e:66:e2:
cf:c2:18:f9:da:48:60:7e:a9:1c:19:76:a4:2f:55:b1:2b:59:
20:59:8f:80:f2:2b:3b:b8:6d:03:cc:70:11:c1:0a:a0:df:7a:
7c:65:53:04:55:41:2e:64:a2:a5:ef:31:36:39:68:e2:d3:d3:
35:70:27:33:83:2b:e7:b2:fe:11:5c:68:f2:a3:de:9d:08:50:
34:27:e8:6a:c2:fe:25:56:9a:50:e9:c6:d7:52:34:71:e4:ff:
b8:39:9f:b9:b5:17:56:49:4b:f3:e1:02:cf:cb:6b:05:45:3c:
5a:8a:4a:b5:a0:20:0b:16:fd:62:14:e6:71:4e:3d:55:13:98:
eb:27:65:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:54:24 2025 by rpki-client